I made a review in keystone that for this issuehttps://review.openstack.org/#/c/132235/And I got solution from old heat solution - https://review.openstack.org/#/c/64142/ I made it for keystone when we faced with problem that is described in the bug:https://bugs.launchpad.net/keystone/+bug/1370022

Ian, thanks for raising the issue here.
The X-Forwarded headers are the standard way to deal with URLs for services
behind proxies. I already commented on the Heat proposal to that effect, I
think that is the proper way to support services behind proxies.
Now in our case, there is also another